3 changed files with 78 additions and 2 deletions
			
			
		| @ -0,0 +1,63 @@ | |||||
|  | # /etc/sysctl.conf - Configuration file for setting system variables | ||||
|  | 
 | ||||
|  | # you can have the CD-ROM close when you use it, and open | ||||
|  | # when you are done. | ||||
|  | #dev.cdrom.autoeject = 1 | ||||
|  | #dev.cdrom.autoclose = 1 | ||||
|  | 
 | ||||
|  | # protection from the SYN flood attack | ||||
|  | #net/ipv4/tcp_syncookies=1 | ||||
|  | 
 | ||||
|  | # see the evil packets in your log files | ||||
|  | #net/ipv4/conf/all/log_martians=1 | ||||
|  | 
 | ||||
|  | # makes you vulnerable or not :-) | ||||
|  | #net/ipv4/conf/all/accept_redirects=0 | ||||
|  | #net/ipv4/conf/all/accept_source_route=0 | ||||
|  | #net/ipv4/icmp_echo_ignore_broadcasts =1 | ||||
|  | 
 | ||||
|  | # needed for routing, including masquerading or NAT | ||||
|  | #net/ipv4/ip_forward=1 | ||||
|  | 
 | ||||
|  | # sets the port range used for outgoing connections | ||||
|  | #net.ipv4.ip_local_port_range = 32768    61000 | ||||
|  | 
 | ||||
|  | # Broken routers and obsolete firewalls will corrupt the window scaling | ||||
|  | # and ECN. Set these values to 0 to disable window scaling and ECN. | ||||
|  | # This may, rarely, cause some performance loss when running high-speed | ||||
|  | # TCP/IP over huge distances or running TCP/IP over connections with high | ||||
|  | # packet loss and modern routers. This sure beats dropped connections. | ||||
|  | #net.ipv4.tcp_ecn = 0 | ||||
|  | 
 | ||||
|  | # Swapping too much or not enough? Disks spinning up when you'd | ||||
|  | # rather they didn't? Tweak these. | ||||
|  | #vm.vfs_cache_pressure = 100 | ||||
|  | #vm.laptop_mode = 0 | ||||
|  | #vm.swappiness = 60 | ||||
|  | 
 | ||||
|  | #kernel.printk_ratelimit_burst = 10 | ||||
|  | #kernel.printk_ratelimit = 5 | ||||
|  | #kernel.panic_on_oops = 0 | ||||
|  | 
 | ||||
|  | # Reboot 600 seconds after a panic | ||||
|  | #kernel.panic = 600 | ||||
|  | 
 | ||||
|  | # enable SysRq key (note: console security issues) | ||||
|  | #kernel.sysrq = 1 | ||||
|  | 
 | ||||
|  | # Change name of core file to start with the command name | ||||
|  | # so you get things like: emacs.core mozilla-bin.core X.core | ||||
|  | #kernel.core_pattern = %e.core | ||||
|  | 
 | ||||
|  | # NIS/YP domain (not always equal to DNS domain) | ||||
|  | #kernel.domainname = example.com | ||||
|  | #kernel.hostname = darkstar | ||||
|  | 
 | ||||
|  | # This limits PID values to 4 digits, which allows tools like ps | ||||
|  | # to save screen space. | ||||
|  | #kernel/pid_max=10000 | ||||
|  | 
 | ||||
|  | # Protects against creating or following links under certain conditions | ||||
|  | # See https://www.kernel.org/doc/Documentation/sysctl/fs.txt | ||||
|  | #fs.protected_hardlinks = 1 | ||||
|  | #fs.protected_symlinks = 1 | ||||
| @ -0,0 +1,12 @@ | |||||
|  | #!/bin/sh | ||||
|  | 
 | ||||
|  | . /etc/init.d/globals | ||||
|  | 
 | ||||
|  | case $1 in | ||||
|  | 	start) | ||||
|  | 		sysctl -p /etc/sysctl.conf | ||||
|  | 	;; | ||||
|  | 	*) | ||||
|  | 		echo "[$BASENAME] Usage: $0 {start}" | ||||
|  | 	;; | ||||
|  | esac | ||||
					Loading…
					
					
				
		Reference in new issue